CVE-2014-2598

Cross-site request forgery (CSRF) vulnerability in the Quick Page/Post Redirect plugin before 5.0.5 for WordPress allows remote attackers to hijack the authentication of administrators for requests that conduct cross-site scripting (XSS) attacks via the quickppr_redirects[request][] parameter in the redirect-updates page to wp-admin/admin.php.

Cross-site request forgery (CSRF) vulnerability in the Quick Page/Post Redirect plugin before 5.0.5 for WordPress allows remote attackers to hijack the authentication of administrators for requests that conduct cross-site scripting (XSS) attacks via the quickppr_redirects[request][] parameter in the redirect-updates page to wp-admin/admin.php.

Vulnerabilidad de CSRF en el plugin Quick Page/Post Redirect anterior a 5.0.5 para WordPress permite a atacantes remotos secuestrar la autenticación de administradores para solicitudes que realizan atques de XSS a través del parámetro quickppr_redirects[request][] en la página redirect-updates en wp-admin/admin.php.